Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

The share permissions on our file server shared folders are quite heterogeneous. In particular, some seem to have been set up to mimic the NTFS permissions of the share.

I know that the default share permission are read only for EVERYONE.

I have also read an article that suggests that the best practice is to configure share permissions with Authenticated Users having Full Control.

Assuming I make sure that the NTFS permissions are sufficiently secure for these shares, is that what you would recommend for new/existing shares?

share|improve this question
1  
Yes. Yes it is. –  joeqwerty Jul 1 '11 at 21:19
    
Thats how I manage all of my windows shares. –  ErnieTheGeek Jul 1 '11 at 21:37
    
Oh, no... not this discussion again. Please! –  Evan Anderson Jul 1 '11 at 22:03
    
@Evan - sorry if I'm being repetitive - I did search this site first –  zen Jul 1 '11 at 22:06
2  
@zen: No need to apologize. There was a fairly long discussion about this just a few days ago at: serverfault.com/questions/282098/… –  Evan Anderson Jul 1 '11 at 22:14
show 1 more comment

1 Answer

up vote 5 down vote accepted

Share permissions function as a filter on the NTFS permissions They take away what the NTFS perms give. The reasons why you want to do that are pretty rare, so setting the share perms as max permissive and doing everything else as a file system right is just fine and simpler.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.